b3hz4d (@b3hz4d) gave a solution and that is working well except on thing I would like to add because i have faced the same issue of onclkad malware and i have finally resolved it. The complete solution is
1. DELETE THIS FILE /wp-includes/class.wp.php
2. DELETE THIS FILE /wp-includes/wp-vcd.php
3. REMOVE BELOW GIVE CONTENT FROM THIS FILE /wp-includes/post.php
if (file_exists(dirname(__FILE__) . ‘/wp-vcd.php’)) include_once(dirname(__FILE__) . ‘/wp-vcd.php’); ?>
4. Look for an additional folder in your \wp-content\plugins\ folder. This folder contain the main source. Locate it and delete this folder and you are all done. In my case the folder names in my two installations were \wp-content\plugins\wp-smushit\ AND \wp-content\plugins\wordpress-seo\ .
5. After completing above four steps, delete cache before accessing your site. You are all done. Enjoy.
Hayat
techibeez.com.au
-
This reply was modified 7 years, 2 months ago by hayat5050.